These are the configuration instructions if you want to configure eTouch SamePage to authenticate against your Corporate LDAP and/or use the LDAP users/groups in eTouch SamePage. Note that this may vary depending on how your corporate LDAP server is setup and the attributes used in your Directory server. For the specific details contact your LDAP administrator.
The property names used in eTouch SamePage and the standard values used for each directory server are as shown below.
You can set the values of your directory server in eTouch SamePage by following the below given steps
1. Login to SamePage as "system".
2. Click on Administration from the toolbar to launch the admin console .
3. Click on System Parameters
3. Choose the LDAP server you are using and set the properties accordingly.
Apache Directory Server
Property Name
|
Description
|
Expected value (example)
|
| net.etouch.fac.ldapProvider
|
Class which implements the LDAP authentication. A default implementation is always provided which should suffice most cases.
|
net.etouch.fac.common.FACLdapProvider
|
|
net.etouch.fac.ldap.providerURL
|
URL of the LDAP server
|
ldap://<ldapserver>:10389
|
|
net.etouch.fac.ldap.securityPrincipal
|
User Id to connect to LDAP server
|
uid=admin,ou=system
|
|
net.etouch.fac.ldap.securityCredential
|
Password to connect to LDAP server
|
|
|
net.etouch.fac.ldap.userSearchBase
|
Context under which valid Usernames can be searched
|
dc=company,dc=com
|
|
net.etouch.fac.ldap.usernameAttr
|
Attribute that should be used as the username for login.
|
cn
|
|
net.etouch.fac.ldap.firstNameAttr
|
First name attribute in LDAP
|
givenname
|
|
net.etouch.fac.ldap.lastNameAttr
|
Last name attribute in LDAP
|
sn
|
|
net.etouch.fac.ldap.emailAttr
|
Email attribute in LDAP
|
mail
|
| net.etouch.fac.autocreateuser
|
Property that decides whether the username should automatically get created in SamePage when user logs in for the first time
Check the KB ticket:http://support.etouch.net/cm/wiki/?id=32595
|
true
|
Restart the server instance after setting these values.
LDAP groups Integration – Apache Directory Server
You will need to configure these additional properties if you want to leverage the Groups functionality of SamePage. This will allow you to lookup Groups from LDAP and assign Project/Page permissions to Groups instead of individual Users.
Please note the last property in this list - net.etouch.fac.groupsenabled. If you want to use the Groups functionality but do not want the Groups to be carried over from LDAP, you can set its value to DB.
|
Property Name
|
Mandatory?
|
Default Value
|
Description
|
|
net.etouch.fac.ldap.group.memberAttrib
|
Y
|
uniquemember / member
|
LDAP Attribute which defines members in Static Groups
|
|
net.etouch.fac.ldap.group.objectclassAttrib
|
Y
|
objectclass
|
LDAP Attribute which defines Object Class in Static Groups
|
|
net.etouch.fac.ldap.group.objectclasstype
|
Y
|
groupOfUniqueNames / groupOfNames
|
Value of LDAP Attribute which defines Object Class for Static Groups
|
|
net.etouch.fac.ldap.group.supportnested
|
N
|
true
|
Support LDAP Static Nested Groups
|
|
net.etouch.fac.ldap.groupSearchBase
|
Y
|
ou=groups,ou=system
|
Search Base for LDAP Static Groups
|
|
net.etouch.fac.ldap.groupnameAttrib
|
Y
|
cn
|
LDAP Attribute which defines Group Names for Static Groups
|
|
net.etouch.fac.ldap.namefields.dn
|
Y
|
true
|
Do LDAP Group contains member information as complete DN or CN
|
|
net.etouch.fac.ldap.staticGroupDescAttrib
|
Y
|
description
|
LDAP Attribute which defines Description for Static Groups
|
|
net.etouch.fac.ldap.user.groupAttribName
|
Y
|
manager
|
LDAP Attribute which is used to form Dynamic (Forward referencing) Groups
|
|
net.etouch.fac.ldap.user.objectclasstype
|
Y
|
person
|
Value of LDAP Attribute which defines Object Class for Users
|
|
net.etouch.fac.groupsenabled
|
N
|
ldap
|
This property defines what kind of groups are enabled in the system, if at all. Valid values are 'db' ,'ldap' or 'false'. Use the value 'ldap' if groups need to be imported from a ldap repository. Use the value 'db' if you want to use groups but do want to import them from ldap. Use 'false' to turn off groups functionality in the system.
|
Back to Top
Active Directory Server
Property Name
|
Description
|
Expected value (example)
|
| net.etouch.fac.ldapProvider
|
Class which implements the LDAP authentication. A default implementation is always provided which should suffice most cases.
|
net.etouch.fac.common.FACLdapProvider
|
|
net.etouch.fac.ldap.providerURL
|
URL of the LDAP server
|
ldap://<ldapserver>:389
|
|
net.etouch.fac.ldap.securityPrincipal
|
User Id to connect to LDAP server
|
cn=Administrator,dc=company,dc=com
|
|
net.etouch.fac.ldap.securityCredential
|
Password to connect to LDAP server
|
|
|
net.etouch.fac.ldap.userSearchBase
|
Context under which valid Usernames can be searched
|
dc=company,dc=com
|
|
net.etouch.fac.ldap.usernameAttr
|
Attribute that should be used as the username for login. In case of Active Directory, this typically is sAMAccountName
|
cn / sAMAccountName
|
|
net.etouch.fac.ldap.firstNameAttr
|
First name attribute in LDAP
|
givenname
|
|
net.etouch.fac.ldap.lastNameAttr
|
Last name attribute in LDAP
|
sn
|
|
net.etouch.fac.ldap.emailAttr
|
Email attribute in LDAP
|
mail
|
| net.etouch.fac.autocreateuser
|
Property that decides whether the username should automatically get created in SamePage when user logs in for the first time
Check the KB ticket:http://support.etouch.net/cm/wiki/?id=32595
|
true
|
Restart the server instance after setting these values.
LDAP groups Integration –Active Directory Server
You will need to configure these additional properties if you want to leverage the Groups functionality of SamePage. This will allow you to lookup Groups from LDAP and assign Project/Page permissions to Groups instead of individual Users.
Please note the last property in this list - net.etouch.fac.groupsenabled. If you want to use the Groups functionality but do not want the Groups to be carried over from LDAP, you can set its value to DB.
|
Property Name
|
Mandatory?
|
Default Value
|
Description
|
|
net.etouch.fac.ldap.group.memberAttrib
|
Y
|
member
|
LDAP Attribute which defines members in Static Groups
|
|
net.etouch.fac.ldap.group.objectclassAttrib
|
Y
|
objectclass
|
LDAP Attribute which defines Object Class in Static Groups
|
|
net.etouch.fac.ldap.group.objectclasstype
|
Y
|
group
|
Value of LDAP Attribute which defines Object Class for Static Groups
|
|
net.etouch.fac.ldap.group.supportnested
|
N
|
true
|
Support LDAP Static Nested Groups
|
|
net.etouch.fac.ldap.groupSearchBase
|
Y
|
OU=groups,OU=company,DC=development,DC=local
|
Search Base for LDAP Static Groups
|
|
net.etouch.fac.ldap.groupnameAttrib
|
Y
|
cn
|
LDAP Attribute which defines Group Names for Static Groups
|
|
net.etouch.fac.ldap.namefields.dn
|
Y
|
true
|
Do LDAP Group contains member information as complete DN or CN
|
|
net.etouch.fac.ldap.staticGroupDescAttrib
|
Y
|
description
|
LDAP Attribute which defines Description for Static Groups
|
|
net.etouch.fac.ldap.user.groupAttribName
|
Y
|
department
|
LDAP Attribute which is used to form Dynamic (Forward referencing) Groups
|
|
net.etouch.fac.ldap.user.objectclasstype
|
Y
|
person
|
Value of LDAP Attribute which defines Object Class for Users
|
|
net.etouch.fac.groupsenabled
|
N
|
ldap
|
This property defines what kind of groups are enabled in the system, if at all. Valid values are 'db' ,'ldap' or 'false'. Use the value 'ldap' if groups need to be imported from a ldap repository. Use the value 'db' if you want to use groups but do want to import them from ldap. Use 'false' to turn off groups functionality in the system.
|
Back to Top
Oracle Internet Directory
Property Name
|
Description
|
Expected value (example)
|
| net.etouch.fac.ldapProvider
|
Class which implements the LDAP authentication. A default implementation is always provided which should suffice most cases.
|
net.etouch.fac.common.FACLdapProvider
|
|
net.etouch.fac.ldap.providerURL
|
URL of the LDAP server
|
ldap://<ldapserver>:389
|
|
net.etouch.fac.ldap.securityPrincipal
|
User Id to connect to LDAP server
|
cn=orcladmin,cn=Users,dc=company,dc=com
|
|
net.etouch.fac.ldap.securityCredential
|
Password to connect to LDAP server
|
|
|
net.etouch.fac.ldap.userSearchBase
|
Context under which valid Usernames can be searched
|
dc=company,dc=com
|
|
net.etouch.fac.ldap.usernameAttr
|
Attribute that should be used as the username for login.
|
cn
|
|
net.etouch.fac.ldap.firstNameAttr
|
First name attribute in LDAP
|
givenname
|
|
net.etouch.fac.ldap.lastNameAttr
|
Last name attribute in LDAP
|
sn
|
|
net.etouch.fac.ldap.emailAttr
|
Email attribute in LDAP
|
mail
|
| net.etouch.fac.autocreateuser
|
Property that decides whether the username should automatically get created in SamePage when user logs in for the first time
Check the KB ticket:http://support.etouch.net/cm/wiki/?id=32595
|
true
|
Restart the server instance after setting these values.
LDAP groups Integration – Oracle Internet Directory
You will need to configure these additional properties if you want to leverage the Groups functionality of SamePage. This will allow you to lookup Groups from LDAP and assign Project/Page permissions to Groups instead of individual Users.
Please note the last property in this list - net.etouch.fac.groupsenabled. If you want to use the Groups functionality but do not want the Groups to be carried over from LDAP, you can set its value to DB.
|
Property Name
|
Mandatory?
|
Default Value
|
Description
|
|
net.etouch.fac.ldap.group.memberAttrib
|
Y
|
uniquemember / member
|
LDAP Attribute which defines members in Static Groups
|
|
net.etouch.fac.ldap.group.objectclassAttrib
|
Y
|
objectclass
|
LDAP Attribute which defines Object Class in Static Groups
|
|
net.etouch.fac.ldap.group.objectclasstype
|
Y
|
groupOfUniqueNames / groupOfNames
|
Value of LDAP Attribute which defines Object Class for Static Groups
|
|
net.etouch.fac.ldap.group.supportnested
|
N
|
true
|
Support LDAP Static Nested Groups
|
|
net.etouch.fac.ldap.groupSearchBase
|
Y
|
cn=Groups,dc=company,dc=com
|
Search Base for LDAP Static Groups
|
|
net.etouch.fac.ldap.groupnameAttrib
|
Y
|
cn
|
LDAP Attribute which defines Group Names for Static Groups
|
|
net.etouch.fac.ldap.namefields.dn
|
Y
|
true
|
Do LDAP Group contains member information as complete DN or CN
|
|
net.etouch.fac.ldap.staticGroupDescAttrib
|
Y
|
Description
|
LDAP Attribute which defines Description for Static Groups
|
|
net.etouch.fac.ldap.user.groupAttribName
|
Y
|
sn
|
LDAP Attribute which is used to form Dynamic (Forward referencing) Groups
|
|
net.etouch.fac.ldap.user.objectclasstype
|
Y
|
person
|
Value of LDAP Attribute which defines Object Class for Users
|
|
net.etouch.fac.groupsenabled
|
N
|
ldap
|
This property defines what kind of groups are enabled in the system, if at all. Valid values are 'db' ,'ldap' or 'false'. Use the value 'ldap' if groups need to be imported from a ldap repository. Use the value 'db' if you want to use groups but do want to import them from ldap. Use 'false' to turn off groups functionality in the system.
|
Back to Top
Novell eDirectory
Property Name
|
Description
|
Expected value (example)
|
| net.etouch.fac.ldapProvider
|
Class which implements the LDAP authentication. A default implementation is always provided which should suffice most cases.
|
net.etouch.fac.common.FACLdapProvider
|
|
net.etouch.fac.ldap.providerURL
|
URL of the LDAP server
|
ldap://<ldapserver>:389
|
|
net.etouch.fac.ldap.securityPrincipal
|
User Id to connect to LDAP server
|
cn=Admin,o=company
|
|
net.etouch.fac.ldap.securityCredential
|
Password to connect to LDAP server |
Favorites
My Settings
Help
Sign Out
Sign in
